OP-TEE: Add option for PKCS11 TA (CFG_PKCS11_TA_LOCK_PIN_AFTER_FAILED_LOGIN_ATTEMPTS) #1658

	# SPDX-FileCopyrightText: 2022-2023 TII (SSRC) and the Ghaf contributors
	#
	# SPDX-License-Identifier: Apache-2.0

	name: check
	on:
	pull_request:
	branches:
	- main
	jobs:
	run-checks:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	- name: Install nix
	uses: cachix/install-nix-action@v24
	- name: Check .nix formatting
	run: nix fmt -- --fail-on-change
	- name: Check reuse lint
	run: nix develop --command reuse lint
	- name: Check nix flake show runs successfully
	run: nix flake show
	- name: evaluation check
	run: nix develop --command make-checks
	- name: Check templates
	run: \|
	set -eux -o pipefail
	tmp_flakes=$(mktemp -d)
	cleanup() { rm -rf "$tmp_flakes"; }
	trap cleanup EXIT
	nix eval --json --apply builtins.attrNames .#templates \| jq -r '.[]' \| while IFS=$'\t' read -r name; do
	nix flake new -t ".#$name" "${tmp_flakes}/${name}";
	if [[ "$name" == "ghaf-module" ]]; then
	nix-instantiate --parse "${tmp_flakes}/${name}/default.nix"
	else
	nix flake show "${tmp_flakes}/${name}"
	fi
	done

Provide feedback